[PATCH] Allow usage of enterprise principals

[Sumit Bose]

Hi,

this patch fixes https://fedorahosted.org/sssd/ticket/1842 . The actual
functionality is added by the replacement of krb5_parse_name() by
(sss_)krb5_parse_name_flags() in krb5_child.c.

bye,
Sumit

[Simo Sorce]

On Thu, 2013-04-11 at 12:46 +0200, Sumit Bose wrote:
> Hi,
>
> this patch fixes https://fedorahosted.org/sssd/ticket/1842 . The actual
> functionality is added by the replacement of krb5_parse_name() by
> (sss_)krb5_parse_name_flags() in krb5_child.c.

Does this really need to be an option ?
What breaks if we always assume enterprise principals ?
It is about some old KDCs potentially not supporting the name type ?

Simo.

[Sumit Bose]

On Thu, Apr 11, 2013 at 09:32:53AM -0400, Simo Sorce wrote:
> On Thu, 2013-04-11 at 12:46 +0200, Sumit Bose wrote:
> > Hi,
> >
> > this patch fixes https://fedorahosted.org/sssd/ticket/1842 . The actual
> > functionality is added by the replacement of krb5_parse_name() by
> > (sss_)krb5_parse_name_flags() in krb5_child.c.
>
> Does this really need to be an option ?
> What breaks if we always assume enterprise principals ?
> It is about some old KDCs potentially not supporting the name type ?

yes, I know two KDCs which I use regulary which cannot handle them.

bye,
Sumit
> Simo.
>
> -- 
> Simo Sorce * Red Hat, Inc * New York
>
> sssd-devel mailing list
> [e-mail]
> https://lists.fedorahosted.org/mailman/listinfo/sssd-devel

[Jakub Hrozek]

On Mon, Apr 15, 2013 at 09:05:47AM +0200, Sumit Bose wrote:
> On Thu, Apr 11, 2013 at 09:32:53AM -0400, Simo Sorce wrote:
> > On Thu, 2013-04-11 at 12:46 +0200, Sumit Bose wrote:
> > > Hi,
> > >
> > > this patch fixes https://fedorahosted.org/sssd/ticket/1842 . The actual
> > > functionality is added by the replacement of krb5_parse_name() by
> > > (sss_)krb5_parse_name_flags() in krb5_child.c.
> >
> > Does this really need to be an option ?
> > What breaks if we always assume enterprise principals ?
> > It is about some old KDCs potentially not supporting the name type ?
>
> yes, I know two KDCs which I use regulary which cannot handle them.
>
> bye,
> Sumit

Ack

[Jakub Hrozek]

On Mon, Apr 22, 2013 at 03:33:05PM +0200, Jakub Hrozek wrote:
> On Mon, Apr 15, 2013 at 09:05:47AM +0200, Sumit Bose wrote:
> > On Thu, Apr 11, 2013 at 09:32:53AM -0400, Simo Sorce wrote:
> > > On Thu, 2013-04-11 at 12:46 +0200, Sumit Bose wrote:
> > > > Hi,
> > > >
> > > > this patch fixes https://fedorahosted.org/sssd/ticket/1842 . The actual
> > > > functionality is added by the replacement of krb5_parse_name() by
> > > > (sss_)krb5_parse_name_flags() in krb5_child.c.
> > >
> > > Does this really need to be an option ?
> > > What breaks if we always assume enterprise principals ?
> > > It is about some old KDCs potentially not supporting the name type ?
> >
> > yes, I know two KDCs which I use regulary which cannot handle them.
> >
> > bye,
> > Sumit
>
> Ack

Pushed to master.